Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
File:                     1p-GUNl6UkwplFPMtI13tOZf3yI.mft (raw, json)
Hash identifier:          07UJ1/4bLeUw2vjXtDXQ+gMl9RDNFWd9NNQWuIiAlNs=
Subject key identifier:   5F:16:78:5F:AC:46:35:3D:DE:D6:9A:B4:5D:64:73:E3:72:9D:AE:DD
Authority key identifier: D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22
Certificate issuer:       /CN=A91F0695/serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
Manifest number:          015F
Signing time:             Wed 05 Nov 2025 04:12:44 +0000
Manifest this update:     Wed 05 Nov 2025 04:12:44 +0000
Manifest next update:     Wed 12 Nov 2025 04:12:44 +0000
Files and hashes:         1: 1p-GUNl6UkwplFPMtI13tOZf3yI.crl (hash: V5viBpVKgpXVp7IhF/WT0ZVdeypw6geIvglwdgKy2HM=)
                          2: D1054582A0C111EEA54E2F0BC4F9AE02.roa (hash: LiqmtbZL/k65yoRZh2qeTmSOnyQ0Qghej6NC1OoEsfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0695, serialNumber=D69F8650D97A524C299453CCB48D77B4E65FDF22
        Validity
            Not Before: Nov  5 04:12:44 2025 GMT
            Not After : Nov 12 04:12:44 2025 GMT
        Subject: CN=690acebc-b0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:1f:c6:63:7c:04:1e:48:00:36:48:a0:9e:
                    3c:27:5c:63:a6:d1:fc:d5:62:d0:0e:e1:a7:db:21:
                    77:d8:f8:3d:92:87:63:58:37:a0:74:01:e8:f6:63:
                    27:a4:c9:e1:37:76:50:66:c3:5b:5f:89:60:28:8b:
                    57:16:98:f5:b1:b0:b2:fa:c9:26:25:fa:e6:84:48:
                    8c:01:76:c0:49:e1:ea:b4:ae:93:00:05:d8:ab:0c:
                    60:a6:2e:41:8d:c6:d0:88:32:0c:e9:3d:37:28:d3:
                    e9:a8:ba:43:9e:18:b9:15:b7:03:03:66:ff:3b:7a:
                    3a:b4:7f:03:ba:fb:0a:f3:7a:7e:17:5f:58:11:4b:
                    b8:ba:15:4a:19:bc:1c:dc:8b:7f:f8:bb:86:ea:58:
                    37:e8:12:77:8d:ca:55:ba:6a:c7:9a:74:67:93:97:
                    a2:a9:f8:72:0f:6f:55:72:02:9a:1d:48:96:7f:cd:
                    df:d0:fc:4b:1a:84:70:11:05:33:37:96:51:57:9d:
                    74:a8:54:18:90:87:90:74:14:15:28:49:4e:50:5d:
                    ae:6b:25:a5:cb:9d:e5:ab:61:41:f6:bf:3b:d1:89:
                    14:53:04:8d:ca:f1:91:fc:5f:a0:9a:3d:7c:3e:21:
                    81:df:a7:60:5b:4e:ff:bd:32:f1:f3:00:cb:82:a6:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:78:5F:AC:46:35:3D:DE:D6:9A:B4:5D:64:73:E3:72:9D:AE:DD
            X509v3 Authority Key Identifier:
                keyid:D6:9F:86:50:D9:7A:52:4C:29:94:53:CC:B4:8D:77:B4:E6:5F:DF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1p-GUNl6UkwplFPMtI13tOZf3yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0695/7C678148A0C111EEB223294AC4F9AE02/1p-GUNl6UkwplFPMtI13tOZf3yI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:64:6a:4f:82:49:ec:e9:69:24:c6:e7:43:e9:40:63:d1:
         3b:66:f0:5a:8d:71:7c:d1:72:53:5f:80:69:87:ce:9e:8c:c8:
         99:46:7f:9b:0a:03:fa:0a:dc:ad:33:81:a3:74:a3:3d:46:80:
         8b:eb:f8:c7:0d:c9:48:b1:af:31:89:28:ac:6d:d7:27:d7:20:
         40:8a:83:cd:c8:09:7f:23:d1:9c:35:a6:ca:18:91:df:79:48:
         c2:9f:1b:ba:72:f8:44:9b:2f:bc:5b:c3:ce:7b:8b:9a:58:e0:
         91:3f:88:95:68:01:5a:1a:14:42:da:82:21:74:82:58:5c:50:
         bd:4b:23:63:d8:a4:4e:c7:7c:70:19:23:ef:20:b3:7d:8d:e0:
         87:3f:0f:46:b6:f6:10:1f:d5:d4:88:a3:0d:91:98:c4:94:09:
         47:2e:bc:07:c2:9c:d7:e7:a1:2b:fa:62:81:bc:8d:b5:a7:59:
         65:5b:d2:a8:c0:37:ae:ac:4c:f7:e5:4a:71:f5:6f:4b:78:14:
         22:5c:f7:ae:40:0c:c5:46:81:ee:28:b2:6f:2a:d7:46:ae:ba:
         4f:bc:db:69:fe:9b:20:90:48:79:4c:71:b5:b0:e3:76:3a:66:
         19:6a:c1:ea:94:2f:b9:5c:66:cf:f6:90:91:2b:f1:7d:c4:89:
         64:33:6f:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA2OTUxMTAvBgNVBAUTKEQ2OUY4NjUwRDk3QTUyNEMyOTk0NTNDQ0I0OEQ3N0I0
RTY1RkRGMjIwHhcNMjUxMTA1MDQxMjQ0WhcNMjUxMTEyMDQxMjQ0WjAYMRYwFAYD
VQQDEw02OTBhY2ViYy1iMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8sfxmN8BB5IADZIoJ48J1xjptH81WLQDuGn2yF32Pg9kodjWDegdAHo9mMn
pMnhN3ZQZsNbX4lgKItXFpj1sbCy+skmJfrmhEiMAXbASeHqtK6TAAXYqwxgpi5B
jcbQiDIM6T03KNPpqLpDnhi5FbcDA2b/O3o6tH8DuvsK83p+F19YEUu4uhVKGbwc
3It/+LuG6lg36BJ3jcpVumrHmnRnk5eiqfhyD29VcgKaHUiWf83f0PxLGoRwEQUz
N5ZRV510qFQYkIeQdBQVKElOUF2uayWly53lq2FB9r870YkUUwSNyvGR/F+gmj18
PiGB36dgW07/vTLx8wDLgqa9twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8WeF+s
RjU93taatF1kc+Nyna7dMB8GA1UdIwQYMBaAFNafhlDZelJMKZRTzLSNd7TmX98i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDY5NS83QzY3ODE0OEEw
QzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVrd3BsRlBNdEkxM3RPWmYz
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwLUdVTmw2VWt3cGxGUE10STEzdE9aZjN5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MDY5NS83QzY3ODE0OEEwQzExMUVFQjIyMzI5NEFDNEY5QUUwMi8xcC1HVU5sNlVr
d3BsRlBNdEkxM3RPWmYzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8kmRqT4JJ7OlpJMbnQ+lAY9E7ZvBajXF80XJTX4Bph86ejMiZRn+b
CgP6CtytM4GjdKM9RoCL6/jHDclIsa8xiSisbdcn1yBAioPNyAl/I9GcNabKGJHf
eUjCnxu6cvhEmy+8W8POe4uaWOCRP4iVaAFaGhRC2oIhdIJYXFC9SyNj2KROx3xw
GSPvILN9jeCHPw9GtvYQH9XUiKMNkZjElAlHLrwHwpzX56Er+mKBvI21p1llW9Ko
wDeurEz35Upx9W9LeBQiXPeuQAzFRoHuKLJvKtdGrrpPvNtp/psgkEh5THG1sON2
OmYZasHqlC+5XGbP9pCRK/F9xIlkM2/H
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:42 2025 by rpki-client